skills/vesely/skills/ai-gateway/Socket

ai-gateway

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, but its trust model is weak: it asks users to install a non-Vercel third-party CLI and forward a Vercel API key through it. Data flows otherwise appear aligned with the stated purpose, and there is no confirmed malware or hidden execution, but the credential-forwarding and publisher mismatch make the skill high risk.

Confidence: 91%Severity: 72%

Audit Metadata

Analyzed At

Sep 17, 2026, 02:21 PM

Package URL

pkg:socket/skills-sh/vesely%2Fskills%2Fai-gateway%2F@36a10ff8bd0e5defc33d1e94f76cc333529c3932c2729770a2a19e492307e5d5